Dive deeper into this product! Research proposals often state how the data will be protected from outside attackers and how its use will be audited. Known security standards, such as NIST-800-53, ISO27001, and PCI, help to create trust that a system is resistant to a certain level of attack. There are many known techniques and tools to achieve this security, with some employing statistics, artificial intelligence, and machine learning to analyse large amounts of data and network traffic to pinpoint anomalies. But such guidelines and techniques do not exist for auditing data use. Beyond ensuring that a researcher is authorised to see, analyse, and/or download the data, there is no definitive way to tell if they are using the data in the agreed-upon way. The GA4GH BARE study group aims to determine a core set of rules defining data use malfeasance.